Verify actual current-token access to built-in event channels (#432)

* Add actual current-token native channel read evidence

* Use supported workflow shells and link channel-read changelogs

* Handle real event exceptions and bind loaded token helper to source

* Capture query-token interval after evidence and metadata preparation

* Retain native child process exit evidence across PowerShell engines

* Bound native reader fixture pipe draining and child termination

* Preserve native errors from attributed channel query statuses
This commit is contained in:
田中ザック Isaac Mathis authored and GitHub committed 2026-09-21 09:18:46 +09:00
1 parent c6da22a2ad
commit fd7a7924aa
13 files changed
+456 -2

No files matched your search

+4
View File
@@ -39,6 +39,10 @@ modules/WecSubscriptionXml.cs text eol=lf
scripts/AppLockerProbe.ps1 text eol=lf
tests/AppLockerProbe*.ps1 text eol=lf
/scripts/ChannelRead.ps1 text eol=lf
/scripts/ChannelReadNative.cs text eol=lf
/config/native_channel_profile.json text eol=lf
/tests/ChannelRead*.ps1 text eol=lf
# Pending AD CS restart plans bind exact implementation bytes.
/scripts/AdcsRestartResume.ps1 text eol=lf
/scripts/AdcsAuditing.ps1 text eol=lf